Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
File: S92aEzqSSGoU7cTnYlsk-V04kcw.mft (raw, json)
Hash identifier: wsZbYbZbB+KgDvzLoybvokP0/VKiYQqaI7l7JGofGs4=
Subject key identifier: D7:C0:C1:4D:97:14:84:D5:0E:48:F7:1B:92:71:E0:F1:75:CC:07:06
Authority key identifier: 4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
Certificate issuer: /CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Certificate serial: 0199FC58CDD9BF69ED65BB6E76D5208555C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
Manifest number: 08CD
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: S92aEzqSSGoU7cTnYlsk-V04kcw.crl (hash: Nz6jr2ouPjGGMl/hZTEvsA5HqXAZTSayLD89zfLqlPw=)
2: takXMVWWq86gQFEdW1EUOBKN5bA.roa (hash: aj1iYELR5J1LrrkI2DJAheQdQ03iRDb31bSm3xq1fzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cd:d9:bf:69:ed:65:bb:6e:76:d5:20:85:55:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bdd9a133a92486a14edc4e7625b24f95d3891cc
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=d7c0c14d971484d50e48f71b9271e0f175cc0706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:27:4f:90:00:93:7a:45:94:79:d8:9f:e7:
dc:c6:d4:4c:30:e5:5e:2d:36:78:78:52:2d:4f:0f:
51:e4:8a:a4:55:8d:fc:6c:bd:f3:cf:54:20:b1:16:
b6:4c:b3:51:b9:ab:2c:00:3a:cc:3d:56:6a:8b:45:
a0:da:30:9c:7e:d8:bd:0a:e3:a9:b7:d5:55:94:4d:
a4:e3:24:53:3c:c0:5f:b6:3b:15:78:3a:47:ba:77:
37:57:f8:a5:5c:e7:0e:bf:f7:da:0c:de:6b:5d:61:
5b:8a:4d:9d:1f:ad:8e:32:77:99:a0:b1:3e:30:7b:
8e:9e:e7:05:04:43:62:f7:f6:e6:63:c4:b3:e5:0c:
ea:59:9b:3a:60:24:62:d6:58:bb:48:72:df:8b:4e:
6a:9e:21:2f:9d:4f:22:db:5c:1c:7e:bd:d9:e5:25:
a8:c7:86:37:b4:9d:df:a5:ec:0a:ac:7d:a6:dd:12:
73:6c:ff:89:d1:e1:9d:f4:4e:5b:a7:68:f3:c2:ab:
04:2a:07:dd:b8:a7:c7:05:63:4f:09:77:c6:63:5f:
bd:ef:c4:07:51:7a:f7:a9:62:a2:50:07:ad:db:94:
b4:ba:21:02:d0:bd:bc:bb:28:71:93:7e:5e:1d:cf:
27:db:5f:9d:c6:4d:9c:8e:be:ba:25:69:53:b3:40:
1b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:C1:4D:97:14:84:D5:0E:48:F7:1B:92:71:E0:F1:75:CC:07:06
X509v3 Authority Key Identifier:
keyid:4B:DD:9A:13:3A:92:48:6A:14:ED:C4:E7:62:5B:24:F9:5D:38:91:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S92aEzqSSGoU7cTnYlsk-V04kcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/70a499-c87e-4546-8950-b704ee27c65c/1/S92aEzqSSGoU7cTnYlsk-V04kcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:54:e7:87:82:0a:ab:0a:cb:a6:9c:2e:92:18:4a:27:6e:06:
4d:c1:3a:7e:40:1b:fb:0c:0e:3b:29:55:ad:a8:25:33:c8:aa:
2c:c2:de:f6:36:e3:ef:5c:d6:eb:a5:a8:dd:72:74:00:3d:ac:
11:9a:50:de:b7:cd:5a:6f:0f:f2:de:ac:42:b2:c6:f3:86:72:
39:53:50:33:68:bf:31:e0:5c:7a:e5:d6:4c:4e:7a:f8:83:65:
e0:bd:62:19:4b:bc:8b:47:bf:36:3f:9a:3d:8c:d1:8c:d1:93:
4e:c5:95:ef:b5:f8:d2:0e:f6:ec:0a:83:8c:63:a6:7e:6b:9f:
7e:7e:67:f4:c4:5b:83:d2:e9:ee:71:5e:b6:08:0e:f5:c7:03:
29:90:5f:52:2d:ec:38:38:59:bb:f3:60:57:8e:8b:34:7a:80:
a9:b6:ba:c8:16:50:fe:f9:8a:75:e4:1b:76:3e:3b:e7:99:32:
d9:1b:ee:34:1f:39:67:5e:d7:39:2a:24:9a:82:4d:50:75:86:
5c:ed:43:9d:3a:34:e1:9e:c0:ce:a2:36:ec:4b:94:7d:75:35:
f0:9d:57:a1:bc:8b:54:ad:58:58:22:e8:d8:82:2f:d1:52:b5:
0b:1b:ec:69:02:bf:07:10:a3:65:95:26:c2:6a:99:de:6e:bb:
3f:4c:0f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WM3Zv2ntZbtudtUghVXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZGQ5YTEzM2E5MjQ4NmExNGVkYzRlNzYyNWIyNGY5NWQz
ODkxY2MwHhcNMjUxMDE5MTIwMTQyWhcNMjUxMDIwMTIwMTQyWjAzMTEwLwYDVQQD
EyhkN2MwYzE0ZDk3MTQ4NGQ1MGU0OGY3MWI5MjcxZTBmMTc1Y2MwNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+UnT5AAk3pFlHnYn+fcxtRMMOVe
LTZ4eFItTw9R5IqkVY38bL3zz1QgsRa2TLNRuassADrMPVZqi0Wg2jCcfti9CuOp
t9VVlE2k4yRTPMBftjsVeDpHunc3V/ilXOcOv/faDN5rXWFbik2dH62OMneZoLE+
MHuOnucFBENi9/bmY8Sz5QzqWZs6YCRi1li7SHLfi05qniEvnU8i21wcfr3Z5SWo
x4Y3tJ3fpewKrH2m3RJzbP+J0eGd9E5bp2jzwqsEKgfduKfHBWNPCXfGY1+978QH
UXr3qWKiUAet25S0uiEC0L28uyhxk35eHc8n21+dxk2cjr66JWlTs0Ab8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfAwU2XFITVDkj3G5Jx4PF1zAcGMB8GA1UdIwQY
MBaAFEvdmhM6kkhqFO3E52JbJPldOJHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAt
YjcwNGVlMjdjNjVjLzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MGE0OTktYzg3ZS00NTQ2LTg5NTAtYjcwNGVlMjdjNjVj
LzEvUzkyYUV6cVNTR29VN2NUbllsc2stVjA0a2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlTnh4IK
qwrLppwukhhKJ24GTcE6fkAb+wwOOylVraglM8iqLMLe9jbj71zW66Wo3XJ0AD2s
EZpQ3rfNWm8P8t6sQrLG84ZyOVNQM2i/MeBceuXWTE56+INl4L1iGUu8i0e/Nj+a
PYzRjNGTTsWV77X40g727AqDjGOmfmuffn5n9MRbg9Lp7nFetggO9ccDKZBfUi3s
ODhZu/NgV46LNHqAqba6yBZQ/vmKdeQbdj4755ky2RvuNB85Z17XOSokmoJNUHWG
XO1DnTo04Z7AzqI27EuUfXU18J1XobyLVK1YWCLo2IIv0VK1CxvsaQK/BxCjZZUm
wmqZ3m67P0wPgQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:56 2025 by rpki-client